isc.sans.edu 5/25/2026, 2:41:20 PM · external

Microsoft Access VBA, (Mon, May 25th)

Microsoft Access VBA, (Mon, May 25th)
CyberSIXT Evidence Panel Source marked as original reporting

DIDIER Stevens discusses Microsoft Access VBA code and its analysis limitations due to the lack of official documentation from Microsoft for the Access file format. He highlights the ineffectiveness of traditional tools like oledump.py on Microsoft Access files and introduces enhancements to the search-for-compression.py tool to support searching for ZLIB compressed VBA code.

The article presents techniques to extract specific VBA components from Access databases, including simple examples that will be elaborated in future entries.

View full article

Article by CyberSIXT